Your message dated Tue, 29 Aug 2006 16:17:15 -0700
with message-id <[EMAIL PROTECTED]>
and subject line Bug#384389: fixed in pbuilder 0.158
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: pbuilder
Version: 0.157
Severity: normal
Tags: patch

Hi,
currently, pbuilder won't run on SELinux systems, even in non-enforcing
("permissive") mode, where SELinux doesn't actually block any access.
I'd like to get pbuilder working for the "targeted" policy at least
(where processes can be ran "unconfined").

The problem arises with some "su" command executed by pbuilder, which
asks for a password.

The workaround is simple - just mount /selinux

suggested fix:
in "/usr/lib/pbuilder/pbuilder-modules", add to mount_proc:
---
if [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled; then
        mkdir -p $BUILDPLACE/selinux
        mount -t selinuxfs /selinux "$BUILDPLACE/selinux"
fi
---
and to "umount_proc":
---
if [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled; then
        umount_one "selinux"
fi
---
If I didn't mess up the if statement, this modification shouldn't have
any effect on non-SELinux systems. It's only tested yet with
"non-enforcing" mode, I bet there is some more work to do to be able to
use pbuilder on a SELinux system which is actually enforcing the policy,
but these changes will hopefully be outside of pbuilder.

Thanks for this great app.


--- End Message ---
--- Begin Message ---
Source: pbuilder
Source-Version: 0.158

We believe that the bug you reported is fixed in the latest version of
pbuilder, which is due to be installed in the Debian FTP archive:

pbuilder_0.158.dsc
  to pool/main/p/pbuilder/pbuilder_0.158.dsc
pbuilder_0.158.tar.gz
  to pool/main/p/pbuilder/pbuilder_0.158.tar.gz
pbuilder_0.158_all.deb
  to pool/main/p/pbuilder/pbuilder_0.158_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Junichi Uekawa <[EMAIL PROTECTED]> (supplier of updated pbuilder package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed, 30 Aug 2006 08:07:18 +0900
Source: pbuilder
Binary: pbuilder
Architecture: source all
Version: 0.158
Distribution: unstable
Urgency: low
Maintainer: Debian pbuilder maintenance team <[EMAIL PROTECTED]>
Changed-By: Junichi Uekawa <[EMAIL PROTECTED]>
Description: 
 pbuilder   - personal package builder for Debian packages
Closes: 384389
Changes: 
 pbuilder (0.158) unstable; urgency=low
 .
   [Junichi Uekawa]
   * Bug fix: "pbuilder: SELinux support, first step: mount /selinux",
     thanks to Erich Schubert (Closes: #384389).
Files: 
 bc983bb99cdd1b9d71f0c50b4513ae66 673 devel extra pbuilder_0.158.dsc
 4de6af79d841a55062b15b3fecb585e4 386155 devel extra pbuilder_0.158.tar.gz
 58ac741dbcabcb81585183f97e91d1ac 78712 devel extra pbuilder_0.158_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFE9MjV2Dd9TugeVcERAnYhAJ0S4oIeVuNKmPmvGC4PH10ed8wb4wCcDUq/
6JQ8bHZPq3SP57j5dsT9Pj8=
=ODS1
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to